VDB

DEBIAN-CVE-2024-45819

DEBIAN-CVE-2024-45819 PUBLISHED CVSS 5.5 MEDIUM

Record from OSV · Published December 19, 2024

PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local memory, which are then copied into guest memory. While actually used parts of the local memory are filled in correctly, excess space that is being allocated is left with its prior contents.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
xenDebian:124.17.5+23-ga4e5191dc0-1
xenDebian:134.19.1-1
xenDebian:144.19.1-1

Risk scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

VendorProductVersions
Debian:12xen4.17.3+36-g54dacb5c02-1, 0, 4.17.1+2-gb773c48e36-1
Debian:13xen0
Debian:14xen0

Timeline

  • Dec 19, 2024 CVE Published
  • Sep 15, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln DEBIAN-CVE-2024-45819
vulnetix vdb fixes DEBIAN-CVE-2024-45819

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2024-45819/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›